Cisco Cisco Firepower Management Center 4000 Guía Del Desarrollador
Version 5.3
Sourcefire 3D System eStreamer Integration Guide
47
Understanding the eStreamer Application Protocol
Host Request Message Format
Chapter 2
Host Request Message Format
To receive host profiles, you submit Host Request messages. You can request
data for a single host or multiple hosts defined by an IP address range.
Note that it is mandatory for all data requests, including requests for host profile
Note that it is mandatory for all data requests, including requests for host profile
information, to first initialize the session by submitting an Event Stream Request
message. To set up for streaming host data only, you can use any of the following
request flag settings in your initial Event Stream Request message:
•
set the bit for the appropriate version of metadata (this can be beneficial
when streaming host data)
•
set no request flags
•
set bit 11 (to suppress any default event streaming if using legacy versions
of eStreamer)
After the initial message, you then use a Host Request message (type 5) to
specify the hosts.
IMPORTANT!
For legacy eStreamer versions with default event streaming, if you
want to stream only host profile data, you need to suppress the default event
messages. First send the server an Event Stream Request message with bit 11 in
the Request Flags field set to 1; then, send the Host Request message.